What’s Vulnerable › Vulnerabilities
CVE-2021-43158
- Severity: medium (CVSS 4.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2021-12-22 · updated 2026-06-17
- Weakness: CWE-352
Description
In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart.
Affected products
References
- https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/2
- https://projectworlds.in/free-projects/php-projects/free-download-online-shopping-system/
- https://github.com/projectworldsofficial/online-shopping-webvsite-in-php/issues/2
- https://projectworlds.in/free-projects/php-projects/free-download-online-shopping-system/
Get alerted when CVE-2021-43158 or the next vulnerability affects your stack